Overview

overview

10

Static

static

d278044674...36.exe

windows7-x64

10

d278044674...36.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2780446747f193948833597b296accd2f5ba6032a91da382fb8507fe7859836

  • Size

    80KB

  • Sample

    221030-ydyn2shadn

  • MD5

    911f0485df4ebf942351c562e93034b1

  • SHA1

    1ff933fa431144c84b480de739ec5296223ed60b

  • SHA256

    d2780446747f193948833597b296accd2f5ba6032a91da382fb8507fe7859836

  • SHA512

    c234b89ec6c70baa0318421f7ebdcc43b78239a9a52abb164eb218d0b3bd45e3a25df004c7a25cdf1c96872fc2af5790f372e7ffa286319c1cb260bed02fccef

  • SSDEEP

    1536:Q0dqr86g7LWnICOqubrzocTzFJ0T72VpGT:J6dIVqgBTzFJ0T72aT

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d2780446747f193948833597b296accd2f5ba6032a91da382fb8507fe7859836

    • Size

      80KB

    • MD5

      911f0485df4ebf942351c562e93034b1

    • SHA1

      1ff933fa431144c84b480de739ec5296223ed60b

    • SHA256

      d2780446747f193948833597b296accd2f5ba6032a91da382fb8507fe7859836

    • SHA512

      c234b89ec6c70baa0318421f7ebdcc43b78239a9a52abb164eb218d0b3bd45e3a25df004c7a25cdf1c96872fc2af5790f372e7ffa286319c1cb260bed02fccef

    • SSDEEP

      1536:Q0dqr86g7LWnICOqubrzocTzFJ0T72VpGT:J6dIVqgBTzFJ0T72aT

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks